CVE-2019-1669

The CVE-2019-1669 issue affects Cisco Firepower Threat Defense (FTD) Software, specifically the data acquisition (DAQ) component. It describes an unauthenticated remote attacker who can bypass configured access control policies or cause a DoS by exploiting improper memory management during traffi...

CVE-2019-1669 Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...

Cisco Multiple Products Denial of Service (CVE-2018-15454)

A Denial of Service DoS vulnerability exists in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD. The vulnerability is due to improper handling of SIP traffic. A successful remote attacker could trigger high CPU usage, resulting in...

Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild

Attackers are actively exploiting a zero-day vulnerability in certain Cisco security products, to cause a denial-of-service DoS condition. The as-yet-unpatched flaw CVE-2018-15454 has an 8.6 CVSS score and is rated high-severity. It exists in the Session Initiation Protocol SIP inspection engine ...

CVE-2018-15454

CVE-2018-15454 affects the SIP inspection engine in Cisco ASA Software and Cisco FTD Software. The root cause is improper handling of SIP traffic, allowing an unauthenticated, remote attacker to trigger high CPU usage or reload the device, leading to DoS. Public sources describe this as a SIP par...

CVE-2018-15454 Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

Cisco ASA and FTD SIP Inspection denial-of-service vulnerability

Overview Cisco Adaptive Security Appliance ASA software and Cisco Firepower Threat Defense FTD software fails to properly parse SIP traffic, which can result in a denial-of-service condition on affected devices. Description Cisco Adaptive Security Appliance ASA software and Cisco Firepower Threat...

CVE-2018-15399

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

CVE-2018-15398

A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass an access control list ACL that is configured for an interface of an affected device. The...

CVE-2018-15397

A vulnerability in the implementation of Traffic Flow Confidentiality TFC over IPsec functionality in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly,...

CVE-2018-15397

A vulnerability in the implementation of Traffic Flow Confidentiality TFC over IPsec functionality in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly,...

CVE-2018-15383

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service DoS...

CVE-2018-0453

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense FTD sensors could allow an authenticated, local attacker to execute specific CLI commands with root privileges on the Cisco Firepower Management Center FM...

Race condition

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

Race condition

A vulnerability in the implementation of Traffic Flow Confidentiality TFC over IPsec functionality in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly,...

Design/Logic Flaw

A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass an access control list ACL that is configured for an interface of an affected device. The...

CVE-2018-15398 Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability

A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass an access control list ACL that is configured for an interface of an affected device. The...

CVE-2018-15383

Cisco ASA and Firepower Threat Defense (FTD) software are affected by CVE-2018-15383 due to a vulnerability in the cryptographic hardware accelerator driver. The issue arises from limited DMA memory and improper handling of resources under low-memory conditions, which an unauthenticated remote at...

CVE-2018-15383 Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service DoS...

CVE-2018-15399

This CVE (CVE-2018-15399) affects Cisco ASA/FTD TCP Syslog: a missing boundary check in the internal function allows an unauthenticated, remote attacker in MITM position to modify syslog TCP segments, exhausting 1550-byte buffers and causing DoS. Impacted features include AnyConnect SSL VPN, clie...